AUMA Riester Products Buffer Overflow Vulnerability via Bluetooth or RS-232 Interface

A buffer overflow vulnerability has been identified in AUMA Riester products, including the AC1.2, MEC 03.01, PROFOX, SGx/SVx, TIGRON, and TIGRON SIL series. This vulnerability allows an unauthenticated remote attacker to cause a buffer overflow by sending excessive data through the service telegram, which can lead to unexpected behavior or a denial-of-service condition. The issue arises when the service telegram is transmitted via Bluetooth or the RS-232 interface.

Impact

Exploitation of this vulnerability causes a buffer overflow, leading to unexpected behavior such as restarting the actuator controls.

Remediation

For actuators with Bluetooth, it is recommended to update the firmware to a version that addresses the buffer overflow. For actuators without Bluetooth, restrict physical access to the device and update the firmware if possible.